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DETAILED ACTION 

CLAIMS PRESENTED 

Claims 7-13, 55-58, 95-98 are presented. 



Response to Arguments 

Applicant has not amended claims. Applicant has argued that the voucher 
including an encrypted content key is not taught by the art. 

Applicant seems to not consider the references as a whole. Hahn does teach 
voucher and content key. What else is content key used if not to protect content? 
Unless Applicant is willing to state that the cited features are somehow outside of the 
normal, usual, and immediately envisage-able use of content key, Applicant's 
arguments are not persuasive. This is particularly in light of Menezies teaching the 
domain and key usage as noted in the file history. Applicant himself has cited Menezies 
(which is, of course, a well-known text and is necessarily assumed to be part of the 
knowledge of the ordinary skill in the art). Thus, Applicant is respectfully requested to 
provide further amendments, arguments, or other appropriate responses. 

CLAIM REJECTIONS 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the 
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subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 7-13, 55-58, 95-98 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hahn ( http://www.w3.org/2000/12/drm-ws/pp/versaware-hahn.html ) 
and Menezes (cited by Applicant, MENEZES, A. et al. "Ch. 13 Key Management 
Techniques", CRC Press, Inc., 1997, XP-02423026, pp. 548-572.) and Poorvi 
( http://www.w3.org/2000/12/drm-ws/pp/hp-poorvi2.html ). 

Regarding claim 7, Hahn teaches "A method of moving protected content within 
an authorized [ ] comprising: transmitting encrypted content and a voucher associated 
with said encrypted content from a first device in the authorized [ ] to a second device in 
the authorized domain (Hahn section 2.3.2.1 Rights Expression, i.e., vouchers, section 
2.3.2.3 Rights Management, i.e., voucher management and content key operations); the 
voucher including an encrypted content key (Hahn section 2.3.2.3 Rights Management, 
i.e., voucher management and content key operations) and [ ]; 
at the first device rendering any vouchers associated with said encrypted content 
unusable (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and 
content key operations). 

These passages of Hahn do not teach "domain" in the sense of the claim. 
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Menezes teaches "domain (chapter 13, section 13.5.1 Key separation and 
constraints on key usage, i.e., key separation" for the motivation of security. 

These passages of these references do not teach "usage state record" in the 
sense of the claim. 

Poorvi teaches "usage state record (section 4 Example outcome of the 
workshop, especially section 4.1, i.e., usage tracking" for the motivation of digital rights 
management. 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to combine the teachings of Hahn and Menezes for the 
motivation noted in the previous paragraphs so as to teach the claimed invention. 
Claim 8: The method of claim 7 further comprising: 
encrypting the entire voucher 

Such encryption is well known in the art for the completeness of security (entire 
voucher being encrypted would be more complete). 

Claim 9, 10 

9. The method of claim 7 further comprising: 

receiving said encrypted content and the voucher associated with that content in a 
second device in the authorized domain. 

10. The method of claim 9 comprising: 

decrypting the encrypted content key at the second device; and 
using the decrypted content key to decrypt the encrypted content. 
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Such use of second device is well known in the art of DRM for the motivation of 
transfer of content. For example, peer-to-peer spread of content would be possible and 
yet the payment for content would also be guaranteed -- so as to protect data. The new 
user at a second device would get the encrypted content but would need to also 
separately get the key in order to decrypt the content. 

Claim 1 1 : Hahn teaches A method for moving protected content from a first device in 
one authorized [ ] to a target device in a different authorized [ ] comprising: 
checking a voucher associated with a piece of content; 

the voucher including an encryptyed content key, [ ], a [ ] traversal flag(Hahn section 
2.3,2.3 Rights Management, i.e., voucher management and content key operations); 
if [ ] allows moving, decrypting the encrypted content key with a device key (Hahn 
section 2.3.2.3 Rights Management, i.e., voucher management and content key 
operations); and 

encrypting the decrypted content key with the public key of the target 
device; 

replacing the original encrypted content key with the re-encrypted content 
key in the voucher (Hahn section 2.3.2.3 Rights Management, i.e., voucher 
management and content key operations); 

transmitting encrypted content and the amended voucher to the target 

device (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and 

content key operations); and 

at the first device rendering any vouchers associated with the content 
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unusable (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and 
content key operations). 

These passages of Hahn do not teach "domain" in the sense of the claim. 

Menezes teaches "domain (chapter 13, section 13.5.1 Key separation and 
constraints on key usage, i.e., key separation" for the motivation of security. 

These passages of these references do not teach "usage state record" in the 
sense of the claim. 

Poorvi teaches "usage state record (section 4 Example outcome of the 
workshop, especially section 4.1, i.e., usage tracking" for the motivation of digital rights 
management. 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to combine the teachings of Hahn and Menezes for the 
motivation noted in the previous paragraphs so as to teach the claimed invention. 
Claim 12: The method of claim 1 1 where the device key used to decrypt the 
encrypted content key is a private key of the first device. 

Such use of private key is well known for the motivation of decryption in digital 
rights management. 

Claim 1 3: The method of claim 1 1 further comprising: 

decrypting the voucher received at the target device using a private key associated 
with the target device's public key; 

decrypting the encrypted content using the decrypted content key from the 
voucher. 
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Such use of public key algorithms is well known for the motivation of asymmetric 
encryption and thereby data protection. 
Claim 55: Hahn teaches An article of manufacture comprising: 

a computer readable medium comprising instructions for: transmitting encrypted content 

and a voucher associated with said encrypted content from a first device in an 

authorized [ ] to a second device in the authorized [ ] (Hahn section 2.3.2.3 Rights 

Management, i.e., voucher management and content key operations); 

the voucher including an encrypted content key and [ ] (Hahn section 2.3.2.3 Rights 

Management, i.e., voucher management and content key operations); 

at the first device rendering any vouchers associated with said encrypted content 

unusable (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and 

content key operations). 

These passages of Hahn do not teach "domain" in the sense of the claim. 

Menezes teaches "domain (chapter 13, section 13.5.1 Key separation and 
constraints on key usage, i.e., key separation" for the motivation of security. 

These passages of these references do not teach "usage state record" in the 
sense of the claim. 

Poorvi teaches "usage state record (section 4 Example outcome of the 
workshop, especially section 4.1, i.e., usage tracking" for the motivation of digital rights 
management. 
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Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to combine the teachings of Hahn and Menezes for the 
motivation noted in the previous paragraphs so as to teach the claimed invention. 
Claim 56: The computer readable medium of claim 55 further comprising instructions 
for: encrypting the entire voucher. 

Such encryption is well known in the art for the completeness of security (entire 
voucher being encrypted would be more complete). 
Claim 57: Hahn teaches An article of manufacture comprising: 
a computer readable medium comprising instructions for: on a first device checking a 
voucher associated with a piece of content (Hahn section 2,3.2.3 Rights Management, 
i.e., voucher management and content key operations); 

the voucher including an encrypted content key, [ ] and a [ ] traversal flag (Hahn section 
2.3.2.3 Rights Management, i.e., voucher management and content key operations); 
if [ ] allows moving, decrypting the encrypted content key with a device key (Hahn 
section 2.3.2.3 Rights Management, i.e., voucher management and content key 
operations); and 

encrypting the decrypted content key with the public key of a target device (Hahn 
section 2.3.2.3 Rights Management, i.e., voucher management and content key 
operations); 

replacing the original encrypted content key with the re-encrypted content 
key in the voucher (Hahn section 2.3.2.3 Rights Management, i.e., voucher 
management and content key operations); 
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transmitting encrypted content and the amended voucher to the target device (Hahn 
section 2.3.2.3 Rights Management, i.e., voucher management and content key 
operations); and 

rendering any remaining vouchers associated with the content unusable (Hahn section 
2.3.2.3 Rights Management, i.e., voucher management and content key operations). 

These passages of Hahn do not teach "domain" in the sense of the claim. 

Menezes teaches "domain (chapter 13, section 13.5.1 Key separation and 
constraints on key usage, i.e., key separation" for the motivation of security. 

These passages of these references do not teach "usage state record" in the 
sense of the claim. 

Poorvi teaches "usage state record (section 4 Example outcome of the 
workshop, especially section 4.1, i.e., usage tracking" for the motivation of digital rights 
management. 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to combine the teachings of Hahn and Menezes for the 
motivation noted in the previous paragraphs so as to teach the claimed invention. 
Claim 58: The article of manufacture of claim 57 where the device key used to 
decrypt the encrypted content key is a private key of the first device. 

Such use of private key is well known for the motivation of decryption (in both 
private key algorithms and public key algorithms) in digital rights management. 
Claim 95: Hahn teaches An apparatus capable of moving protected content within an 
authorized [ ] comprising: 
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means for transmitting encrypted content and a voucher associated with said 
encrypted content from said apparatus to a second device in the authorized [ ] (Hahn 
section 2.3.2.3 Rights Management, i.e., voucher management and content key 
operations); 

the voucher including an encrypted content key and [ ] (Hahn section 2.3.2.3 Rights 

Management, i.e., voucher management and content key operations); 

means for rendering any vouchers associated with said encrypted content unusable 

(Hahn section 2.3.2.3 Rights Management, i.e., voucher management and content key 

operations). 

These passages of Hahn do not teach "domain" in the sense of the claim. 

Menezes teaches "domain (chapter 13, section 13.5.1 Key separation and 
constraints on key usage, i.e., key separation" for the motivation of security. 

These passages of these references do not teach "usage state record" in the 
sense of the claim. 

Poorvi teaches "usage state record (section 4 Example outcome of the 
workshop, especially section 4.1, i.e., usage tracking" for the motivation of digital rights 
management. 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to combine the teachings of Hahn and Menezes for the 
motivation noted in the previous paragraphs so as to teach the claimed invention. 
Claim 96: The apparatus of claim 95 further comprising: 
means for encrypting the entire voucher. 
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Such encryption is well known in the art for the completeness of security (entire 
voucher being encrypted would be more complete). 

Claim 97: Hahn teaches An apparatus capable of moving protected content to a target 
device in a different authorized domain comprising: means for checking a voucher 
associated with a piece of content (Hahn section 2,3.2.3 Rights Management, i.e., 
voucher management and content key operations); 

the voucher including an encrypted content key, a usage state record and a domain 
traversal flag (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and 
content key operations); 

means for decrypting the encrypted content key with a device key (Hahn section 2.3.2.3 
Rights Management, i.e., voucher management and content key operations); 
means for encrypting the decrypted content key with the public key of the target 
device (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and 
content key operations); 

means for replacing the original encrypted content key with the re-encrypted content 
key (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and content 
key operations); 

means for transmitting encrypted content and the amended voucher to the target 
device (Hahn section 2.3.2.3 Rights Management, i.e., voucher management and 
content key operations); and 

means for rendering any vouchers associated with the content unusable (Hahn section 
2.3.2.3 Rights Management, i.e., voucher management and content key operations). 
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These passages of Hahn do not teach "domain" in the sense of the claim. 

Menezes teaches "domain (chapter 13, section 13.5.1 Key separation and 
constraints on key usage, i.e., key separation" for the motivation of security. 

These passages of these references do not teach "usage state record" in the 
sense of the claim. 

Poorvi teaches "usage state record (section 4 Example outcome of the 
workshop, especially section 4.1, i.e., usage tracking" for the motivation of digital rights 
management. 

Hence, it would have been obvious to those of ordinary skill in the art at the time 
of the claimed invention to combine the teachings of Hahn and Menezes for the 
motivation noted in the previous paragraphs so as to teach the claimed invention. 
Claim 98: The apparatus claim 97 where the device key used to decrypt the 
encrypted content key is a private key of the apparatus. 

Such use of private key is well known for the motivation of decryption (in both 
private key algorithms and public key algorithms) in digital rights management. 

Conclusion 

The art made of record and not relied upon is considered pertinent to applicant's 
disclosure. The art disclosed general background. 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Points of Contact 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

(571) 273-8300, (for formal communications intended for entry) 



Or: 
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(571) 273-3836 (for informal or draft communications, please label "PROPOSED" or 
"DRAFT") 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David Jung whose telephone number is (571) 272-3836 
or Kambiz Zand whose telephone number is (571) 272-3811. 



David Jung 




Patent Examiner 



1/21/08 



